Re: [tcpdump-workers] Max lines in filter

[Jefferson Ogata]

Keplinger, Michael A wrote:

Thanks for the responses thus far.

We are using Libpcap version 0.4
and tcpdump v3.4

which is the same that Guy Harris had when his crashed.  It may be difficult to upgrade due to our Customer (contract gig).  i'll see if I can work around it.

See

http://www.tcpdump.org/lists/workers/2000/msg01364.html

for an explanation as well as a patch.

It would be really wise to upgrade if possible, not only to fix things like these but also to protect against remote vulnerabilities.

Thanks

-----Original Message-----
From: Jefferson Ogata [mailto:[EMAIL PROTECTED]]
Sent: Monday, December 09, 2002 16:37
To: [EMAIL PROTECTED]
Subject: Re: [tcpdump-workers] Max lines in filter


Keplinger, Michael A wrote:

Does anybody know if there is a maximum number of lines that you can have in a tcpdump filter, I am getting segmentation fault when the number of lines approaches 100.

What version of tcpdump and libpcap? There is an bug in older versions of the code generator.

--
Jefferson Ogata <[EMAIL PROTECTED]>
NOAA Computer Incident Response Team (N-CIRT) <[EMAIL PROTECTED]>

-
This is the TCPDUMP workers list. It is archived at
http://www.tcpdump.org/lists/workers/index.html
To unsubscribe use mailto:[EMAIL PROTECTED]?body=unsubscribe